CVEvulnerability
CVE-2011-4405
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-11-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.
Affected configurations
• canonical ubuntu linux 11.04
• canonical ubuntu linux 11.10
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/77214 osvdb.org
- http://secunia.com/advisories/46909 Vendor Advisory
- http://www.securityfocus.com/bid/50721 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1265-1 www.ubuntu.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71394 exchange.xforce.ibmcloud.com
- http://osvdb.org/77214 osvdb.org
- http://secunia.com/advisories/46909 Vendor Advisory
- http://www.securityfocus.com/bid/50721 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1265-1 www.ubuntu.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71394 exchange.xforce.ibmcloud.com